CSRF test!

I shelved this while I waiting for a discussion in the related issue[1] to die down. That discussion's been done for a while, so...CSRF test!

[1]: https://github.com/ManageIQ/cfme/issues/285